Who we are
LymphShop is a trading name of Haddenham Healthcare Ltd, whose registered office is at 249 Silbury Boulevard, Milton Keynes MK9 1NA and we are a company registered in England and Wales under company number 3591270. We are registered on the Information Commissioner's Office Register registration number ZA319979. We are the Data Controller in respect of our Customer Relationship Management system (CRM) and act as the Data Processor in all other circumstances. Our designated Data Protection Officer/Appointed Person for the organization is Tim Gabb, who can be contacted at Haddenham Healthcare Ltd, Crendon House, Crendon Industrial Estate, Long Crendon HP18 9BB or by email to GDPR@hadhealth.com
Information That We Collect
Haddenham Healthcare Ltd processes your personal information to meet our legal, statutory and contractual obligations and to provide you with our products and services.
The sort of personal data that we may collect is:
• Name
• Address
• Contact Number and/or Email
• Special Category Data in the form of health/medical information
We receive this information from you directly.
How We Use Your Personal Data (Legal Basis for Processing)
We will never disclose, share or sell your data; unless required to do so by law.
We collect your personal data in the performance of a contract or to fulfil your direct request.
Sometimes it is necessary for your data to be transferred to our factories in Germany or Denmark in order to fulfil the order. In such cases the transfer is by secure encrypted code and the factories will not hold your data for any longer than is necessary to fulfil that order and/or comply with their applicable laws. We retain your data on our secure servers for seven years to comply with UK Accounting law.
Where we act as Data Controller (our CRM and/or mailing list), personal information will only be kept if full consent has been provided.
Where we act as Data Processor (all other scenarios), the legal basis on which we collect process and store this information is on the grounds of legitimate interest; in short to fulfil your request.
Your Rights
You have the right to access any personal information that Haddenham Healthcare Ltd processes about you and to request information about:
• What personal data we hold about you
• The purposes of the processing
• The categories of personal data concerned
• The recipients to whom the personal data has/will be disclosed
• How long we intend to store your personal data for
• If we did not collect the data directly from you, information about the source
If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will strive to update/correct it as quickly as possible; unless there is a valid reason for not doing so, at which point you will be notified.
You also have the right to request erasure of your personal data or to restrict processing (where applicable) in accordance with data protection laws, to exercise your data portability rights. You also have the right to lodge a complaint with a supervisory authority. We should also inform you that we do not use any automated decision-making system in our processes.
Safeguarding Measures
Haddenham Healthcare Ltd takes your privacy seriously and takes every reasonable measure and precaution to protect and secure your personal data. We work hard to protect you and your information from unauthorized access, alteration, disclosure or destruction and have several layers of security measures in place.
Special Categories Data
Owing to the nature of the products we offer, we sometimes may need to process sensitive personal information (known as special category data) such as measurements or sizing for medical garments. Where we collect such information, we will only request and process the minimum necessary for the specified purpose and identify a compliant legal basis for doing so.
Our cyber security measures are certified by the UK Goverment's Cyber Essentials scheme and verified by an independent certification body.